$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa File: 12c649e9-815b-3351-8b11-f9a675702d6c.roa (raw, json) Hash identifier: pTgBR11v7Q9hlT4gTMfBujJx17DOFRTu7RjZ9z26p80= Subject key identifier: 64:99:51:7B:65:A2:82:EC:B4:B1:B4:81:7A:D0:6D:AE:6B:1F:50:78 Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584AA42B6DEBD8909B1CDEE1A040 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 7050 IP address blocks: 129.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:6d:eb:d8:90:9b:1c:de:e1:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=874f0576-0542-4fd4-a0da-a9efafe47c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e6:f6:18:5b:7a:c2:8f:f3:66:73:31:d7:ed: 9f:cb:8f:80:1a:32:9a:d3:51:0d:72:15:89:c1:59: b6:3f:59:7d:7e:57:ec:40:90:6e:11:3e:f0:1f:fd: a5:b3:a6:c3:d0:f3:a1:ac:92:d3:c1:9f:de:73:0c: 8f:c2:fb:c4:52:64:cc:4a:fb:00:73:52:f0:48:cc: f4:6f:bd:2a:23:ee:d6:a4:6b:8e:7c:93:bf:30:ec: 90:ae:e7:96:45:31:15:7d:b5:03:ee:38:c6:41:63: b8:ca:5d:17:39:7b:95:f6:00:7e:58:78:4c:a1:ae: 73:5e:81:56:e3:10:be:25:e7:1b:86:bd:9e:8b:28: 41:8e:39:bc:4e:63:15:b6:97:cf:82:58:0d:eb:68: 10:73:70:38:14:d7:a6:32:41:97:1a:b1:f6:a8:fd: a6:01:47:33:b3:a2:54:3a:ed:03:cd:20:6a:ce:10: d6:d5:4e:e6:fb:57:fd:cd:51:fb:3b:f6:94:01:c3: 24:d4:bc:a4:13:57:a9:3c:8c:f7:05:73:ac:84:e4: f2:5a:38:a2:58:58:b0:5f:62:78:4f:d9:fc:72:dd: f8:98:ca:00:39:7f:7b:02:da:5d:fa:d1:ac:19:da: 1d:89:10:37:cc:75:8a:97:18:49:a9:43:ab:bd:07: 3c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:99:51:7B:65:A2:82:EC:B4:B1:B4:81:7A:D0:6D:AE:6B:1F:50:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv4: 129.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:01:93:42:d9:b7:cd:91:24:51:d1:4b:77:8f:72:49:38:c8: a5:82:c9:60:fd:46:3a:ab:6a:43:d4:35:2f:f9:71:53:bd:73: cf:98:c3:50:64:89:d8:f8:b2:bc:9b:fa:fe:84:a6:9b:f8:19: 15:8b:cb:72:d9:01:62:5f:62:fd:29:f5:e0:29:c5:b6:06:62: f1:47:85:9c:53:68:39:89:90:10:97:03:f5:50:14:bb:9f:a3: 74:d3:92:3f:53:bf:53:ae:b4:e1:52:95:6e:47:ee:44:3d:1b: e5:6c:8a:26:46:39:ef:4e:57:2a:9e:67:a9:56:67:86:4a:61: bf:82:8a:7d:41:a9:6a:1b:5a:c9:f6:28:e1:c5:2f:bf:e6:c3: 8c:4d:d4:9a:ea:fd:d8:6f:6a:c2:0d:c3:2f:2a:63:51:c3:b6: 7d:1f:aa:8f:97:76:ab:28:6d:a6:1c:1b:d1:52:cf:db:8e:84: b8:ca:5f:1f:fd:81:5c:02:8e:06:46:bd:c0:02:24:3c:5e:51: ef:29:c9:de:56:f2:4e:4f:a0:25:89:df:f2:95:da:79:b4:f2: 04:45:35:90:11:57:3c:62:de:b3:1d:13:f1:ba:e0:84:ae:5a: 2c:77:28:e8:5f:28:ce:3f:14:29:a7:85:07:e5:88:65:63:25: fc:7d:04:cc -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqkK23r2JCbHN7hoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ODc0ZjA1NzYtMDU0Mi00ZmQ0LWEwZGEtYTllZmFmZTQ3YzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+b2GFt6wo/zZnMx1+2fy4+AGjKa01ENchWJ wVm2P1l9flfsQJBuET7wH/2ls6bD0POhrJLTwZ/ecwyPwvvEUmTMSvsAc1LwSMz0 b70qI+7WpGuOfJO/MOyQrueWRTEVfbUD7jjGQWO4yl0XOXuV9gB+WHhMoa5zXoFW 4xC+Jecbhr2eiyhBjjm8TmMVtpfPglgN62gQc3A4FNemMkGXGrH2qP2mAUczs6JU Ou0DzSBqzhDW1U7m+1f9zVH7O/aUAcMk1LykE1epPIz3BXOshOTyWjiiWFiwX2J4 T9n8ct34mMoAOX97Atpd+tGsGdodiRA3zHWKlxhJqUOrvQc8DQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGSZUXtlooLstLG0gXrQba5rH1B4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvMTJjNjQ5ZTktODE1Yi0z MzUxLThiMTEtZjlhNjc1NzAyZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgVkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIwGTQtm3zZEkUdFLd49ySTjIpYLJYP1GOqtqQ9Q1L/lxU71zz5jDUGSJ 2PiyvJv6/oSmm/gZFYvLctkBYl9i/Sn14CnFtgZi8UeFnFNoOYmQEJcD9VAUu5+j dNOSP1O/U6604VKVbkfuRD0b5WyKJkY5705XKp5nqVZnhkphv4KKfUGpahtayfYo 4cUvv+bDjE3Umur92G9qwg3DLypjUcO2fR+qj5d2qyhtphwb0VLP246EuMpfH/2B XAKOBka9wAIkPF5R7ynJ3lbyTk+gJYnf8pXaebTyBEU1kBFXPGLesx0T8brghK5a LHco6F8ozj8UKaeFB+WIZWMl/H0EzA== -----END CERTIFICATE-----Generated at Tue Aug 12 19:09:26 2025 by rpki-client